How to Enable and Configure DNS over HTTPS (DoH) in Web Browsers

In this article

1. Understanding Traditional DNS vs. Secure DNS (DoH)
2. How to Turn on DoH in Mozilla Firefox
3. How to Turn on DoH in Google Chrome
4. How to Turn on DoH in Microsoft Edge
5. How to Verify That Your DoH Settings Are Working
6. Potential Trade-Offs and Considerations
7. Frequently Asked Questions
8. Does enabling DoH completely hide my browsing activity from my ISP?
9. Should I use my ISP’s DoH provider or a third-party provider?
10. Will DoH slow down my internet connection?

When you type a website address into your browser, your computer queries a Domain Name System (DNS) server to translate that name into an IP address. By default, this traditional DNS lookup happens in plain text. Even if you use HTTPS to encrypt your traffic with the destination server, your Internet Service Provider (ISP), local network administrators, or malicious actors on public Wi-Fi can easily intercept your DNS queries and see every website you visit.

DNS over HTTPS (DoH) solves this vulnerability by wrapping your DNS queries inside the same HTTPS encryption used for secure web browsing. This guide walks through the exact steps to enable DNS over HTTPS in browser environments like Google Chrome, Mozilla Firefox, and Microsoft Edge to protect your browsing privacy against ISP snooping.

Understanding Traditional DNS vs. Secure DNS (DoH)

Traditional DNS protocols were designed decades ago without security or encryption in mind. When your operating system or browser requests a website’s IP address, that request travels across the network in cleartext UDP or TCP packets. Your ISP maintains logs of these requests, which can be analyzed, monetized, or shared depending on local regulatory frameworks.

DoH changes this by sending your DNS queries to a compatible resolver over an encrypted HTTPS connection, usually via port 443. To network monitors, your DNS lookup looks identical to normal secure web traffic. They can see that you are connecting to a specific DNS provider, but they cannot see which specific domains you are looking up.

How to Turn on DoH in Mozilla Firefox

Firefox has long focused on privacy and was one of the earliest browsers to implement encrypted DNS natively. It includes a fallback mechanism that reverts to traditional DNS only if the encrypted resolver fails.

1. Open Firefox and click the three-line menu icon in the upper-right corner, then select Settings.
2. In the left sidebar, click on General.
3. Scroll down to the Network Settings section and click the Settings… button.
4. Locate the checkbox labeled Enable DNS over HTTPS.
5. Choose your protection level:
   • Increased Protection: Uses your default provider if available, but falls back to standard DNS if issues arise.
   • Max Protection: Strictly uses encrypted DNS and warns you or blocks requests if the secure resolver is unreachable.
6. Select a designated provider from the dropdown menu (such as Cloudflare or NextDNS) or enter a custom provider URL.

How to Turn on DoH in Google Chrome

Google Chrome handles secure DNS by integrating with your operating system’s existing configuration or allowing you to specify a custom secure provider directly within the application settings.

1. Open Chrome and click the three vertical dots in the upper-right corner, then choose Settings.
2. Click on Privacy and security in the left sidebar, then select Security.
3. Scroll down to find the Use secure DNS toggle and ensure it is switched on.
4. Choose between:
   • With your current service provider: Chrome attempts to use DoH if your current DNS provider supports it.
   • Choose another provider: Select a trusted third-party provider from the dropdown list (such as Google Public DNS, Cloudflare, or CleanBrowsing) or type in a custom DoH URI template.

How to Turn on DoH in Microsoft Edge

Because Microsoft Edge shares the same Chromium foundation as Chrome, the configuration process is nearly identical.

1. Open Edge and click the three horizontal dots in the upper-right corner, then open Settings.
2. Navigate to Privacy, search, and services from the left menu.
3. Scroll down to the Security section.
4. Locate the setting titled Use secure DNS to specify how to look up the network address for websites and turn it on.
5. Select Choose a service provider and pick from the provided list or input a custom template URL.

How to Verify That Your DoH Settings Are Working

Once you configure DoH, you should verify that your browser is successfully routing encrypted queries rather than leaking requests back to your ISP’s default servers.

• Use Provider Diagnostic Pages: If you configured Cloudflare as your secure resolver, visit 1.1.1.1/help in your browser. Look for the line indicating “Using HTTPS over DNS (DoH)” and confirm it reads “Yes.”
• Use Leak Testing Tools: Independent testing sites like DNSLeakTest.com can perform an extended test to show which servers are resolving your queries. If your ISP’s name no longer appears in the test results and instead shows your chosen DoH provider, your configuration is active.

Potential Trade-Offs and Considerations

While enabling DoH significantly improves privacy against local network observers, it introduces a few operational changes to keep in mind:

• Enterprise Filtering: If you work on a corporate network or use parental control software that relies on local DNS interception for content filtering, forcing browser-level DoH may bypass those local controls.
• CDN Routing Efficiency: Traditional DNS resolvers often route you to the nearest Content Delivery Network (CDN) node based on your ISP’s local infrastructure. Shifting to a centralized public DoH provider might occasionally route your initial connection slightly further away, though performance impacts are typically negligible.

Frequently Asked Questions

Does enabling DoH completely hide my browsing activity from my ISP?

No. While DoH hides your DNS queries, your ISP can still see the actual IP addresses of the servers you connect to after the DNS lookup is resolved. To hide both your DNS requests and your final destination IP addresses, you need to use a Virtual Private Network (VPN) or the Tor network.

Should I use my ISP’s DoH provider or a third-party provider?

If your ISP supports DoH, using it maintains your current routing behavior. However, if your goal is to prevent ISP tracking and data collection, you should select an independent, privacy-focused third-party provider like Cloudflare, Quad9, or NextDNS.

Will DoH slow down my internet connection?

In most cases, performance differences are unnoticeable. Modern DoH implementations use optimized connection pooling and HTTP/3 protocols to ensure lookup speeds match or exceed traditional DNS queries.